This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
File:                     30D2517AF1F211F0B442E9B1456F56BC.roa (raw, json)
Hash identifier:          V5VqeDSnGP7R6CkB6QLX84/3xmvrGgAPlmIazyGRnS0=
Subject key identifier:   EB:BB:AD:F1:07:AA:F7:68:E1:14:17:FD:B9:2C:E6:21:7F:0E:FD:77
Certificate issuer:       /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Certificate serial:       02
Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
Signing time:             Thu 15 Jan 2026 09:11:35 +0000
ROA not before:           Thu 15 Jan 2026 09:11:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136418
IP address blocks:        151.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
        Validity
            Not Before: Jan 15 09:11:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6968af47-5adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:87:8c:59:07:90:55:b5:e2:73:3e:ee:97:
                    1c:0b:41:4d:ce:83:ee:2e:65:31:80:ba:e3:8f:1d:
                    34:eb:22:23:4e:6e:c2:7c:92:69:60:f8:d4:92:d2:
                    1e:9b:d5:63:25:5b:2e:ab:ff:82:0e:cd:df:75:e3:
                    28:eb:b4:33:4f:8a:86:95:c9:e2:ab:61:46:a2:22:
                    63:a5:00:02:e4:33:f0:43:72:84:86:34:e6:35:90:
                    48:2a:69:15:e4:57:c6:ec:91:42:63:48:40:4e:9d:
                    69:f4:eb:90:4c:64:39:44:3b:c2:ae:4f:6b:d5:17:
                    cf:86:61:11:76:d3:b0:6a:fc:77:b9:3f:b5:71:4c:
                    4f:e6:2e:04:d8:61:52:8e:22:f1:1f:50:65:13:db:
                    65:f3:cc:55:0a:c1:7e:bd:ea:5f:7a:b8:e0:2d:a3:
                    7a:30:b0:d4:de:d0:a7:0f:b9:db:3f:7f:f0:56:dc:
                    ea:fe:db:32:a9:6c:63:9c:12:48:e7:b1:4c:73:05:
                    46:95:28:d9:c9:c9:48:25:de:4a:64:0d:c9:55:65:
                    c1:ee:af:5c:6d:a1:35:76:a1:db:3a:98:ba:9e:aa:
                    56:80:19:6f:42:91:1b:67:da:dc:79:a8:f4:4f:2c:
                    f1:f7:3e:56:e4:9f:00:15:d6:88:e8:ad:c3:7d:b0:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:AD:F1:07:AA:F7:68:E1:14:17:FD:B9:2C:E6:21:7F:0E:FD:77
            X509v3 Authority Key Identifier:
                keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:75:29:ea:1c:02:32:67:97:61:c3:21:19:51:d6:4e:21:
         5e:6a:d8:79:3f:4a:61:fe:98:6b:f3:53:08:69:d7:93:1e:52:
         5c:0d:da:ec:a8:46:ba:10:20:99:b2:30:b6:51:68:e8:5d:f5:
         e6:2e:3c:0f:be:40:be:b6:3f:ad:2b:dd:1d:a2:69:bc:e1:e4:
         6f:57:66:5f:7f:5a:66:0a:ab:16:d3:8e:2f:bd:3c:c0:49:ea:
         58:25:84:bc:d9:03:2a:ea:76:dd:5e:d2:34:db:7c:d0:20:bf:
         ee:7d:90:1a:50:a5:42:95:dd:28:c1:5f:46:eb:9b:1d:f0:1f:
         75:2b:5e:50:1a:2b:45:98:d0:49:30:df:e1:dc:54:cf:27:e3:
         0d:6a:b9:75:b8:c2:19:5d:5e:50:77:08:7e:4f:fe:5d:f1:be:
         d4:c8:ac:76:26:f1:4c:3c:e1:ae:fa:53:30:99:8d:f8:79:15:
         0c:49:49:cd:09:25:10:5f:2e:89:b5:bc:ca:f3:3c:6b:68:f3:
         3a:c9:df:d3:ad:8b:fc:62:27:81:4a:c5:93:b2:df:ab:65:bc:
         ef:5f:3c:b0:30:33:fa:00:fe:c2:0f:d3:3e:02:f9:6a:42:a2:
         c9:fc:01:cf:66:b3:64:96:2c:64:66:47:24:d3:15:c5:4a:ca:
         f9:8e:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:20:57 2026 by rpki-client